cacheout: Add -encrypt option